Privacy Policy

Data Controller and contact details

B2S Srl
based in Via Santa Tecla, 5
20122 - Milan (Mi)
VAT number 11326710966 ("Owner")

Types of data collected and origin

Among the categories of personal data collected by www.brandtostore.com (the "Platform" "), independently or through third parties, there are: navigation data; company email, name; surname; company he works for, corporate role, telephone (private or corporate).

"User" means the person who accesses the Platform as an administrator or person in charge of a digital showroom owner or a person who accesses the Platform, independently or at the invitation of a digital showroom owner or the Owner, to use the functions offered therein.

Personal data may be freely provided by the User, or by the owner of the digital showroom (hereinafter, the "Digital Showroom") who invited the User or for which the User acts or, in the case of navigation data, can be collected automatically when using the Platform.

During the use of the Platform, the User's personal data may also be processed by the Digital Showrooms to which the User accesses using the functions offered by the Platform. These subjects process the data as independent data controllers. For information regarding the processing of personal data by Digital Showrooms and to exercise their rights towards them, Users can ask Digital Showrooms to provide the relevant information. For more information, the User can consult the section “Treatments in Digital Showrooms”.

The User assumes responsibility for the personal data of third parties obtained, published or shared through the Platform and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability deriving from such treatments.
The User who transmits the personal data of third parties to the Data Controller, also through the Platform, undertakes to make this information available to such third parties.

Recipients of personal data

The User's personal data may be accessible to subjects acting on behalf of the Data Controller duly authorized to process (for example, administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as data processors by the Data Controller.

Personal data may also be received from the Digital Showrooms to which the User accesses through the Platform. In this case, the Digital Showrooms will act as independent data controllers. For more information, the User can consult the “Treatments of Digital Showrooms” section below.

Legal basis of the processing and purpose

The data are processed by the Data Controller for the following purposes and on the basis of the indicated legal bases.

a) Based on the need to perform contractual or pre-contractual measures in order to:

- allow access and registration to the Platform and use of the same;

- manage the contractual relationship with the Digital Showrooms for which the User acts;

- follow up on the User's requests.

b) On the basis of the legitimate interest of the Data Controller, specifically:

- for the analysis and improvement of its services, the performance of statistical and / or research and development activities;

- to ensure the security and confidentiality of its IT systems;

- in order to defend their rights during the course of judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to offered services;

- in the case of extraordinary transactions, mergers, sale of business units, acquisitions, etc .;

- in accordance with art. 130 of Legislative Decree 196/2003, for sending newsletters by e-mail, and communications of a commercial nature relating to products and services of the same type as those offered by the Platform and requested by Users who have logged in and registered with it, without prejudice to the possibility for the User to oppose such processing (exercise the 'opt-out) (i) by clicking the appropriate opt-out link at the bottom of each email or (ii) at any time, following the instructions provided in the "How to exercise your rights" section below.
The Data Controller will not process the personal data of Users to send commercial communications other than those indicated, without the prior consent of the same, and, in any case, not will communicate or transfer Users' personal data to third parties for commercial or marketing purposes.

Whenever the processing is based on legitimate interest, the Owner adopts solid guarantees to ensure that Users' privacy is protected and that the User's interests or fundamental rights and freedoms do not prevail over his legitimate interest.

***

The provision of data for the purposes referred to in point a) above, as necessary to offer the services of the Platform, is mandatory and the refusal to provide the personal data being processed makes it impossible to perform the requested services.

Transfers outside the European Union

If the owner transfers personal data outside the EU, the transfers will take place in compliance with the legislation on personal data in order to ensure an adequate level of protection.More information on the transfers and on the guarantees adopted can be obtained by sending a specific request using the contact details of the Data Controller indicated in this information.

Retention period

The User's personal data are processed and stored for the time required by the purposes for which they were collected. At the end of the retention period, personal data will be deleted or anonymised, unless the law requires archiving obligations.

The retention period of the necessary data, in particular, is:

10 years from the end of the relationship, for contractual purposes where there is a need to use them for litigation purposes.
18 months from the registration of the data or from the last interaction of the User with the Platform for the analysis and improvement of its services, the performance of statistical and / or research and development activities, except in the case in which the data has been anonymized.
24 months from data registration or from the last User interaction with the Platform, for marketing purposes or for sending newsletters on products and services similar to those requested by the Platform, without prejudice to the User's right to revoke the same or to oppose the processing.

At the end of these terms, the right of access, cancellation, rectification and the right to the portability of personal data can no longer be exercised.

The Data Controller will retain personal data after this time has elapsed only when required to comply with legal obligations or in the event of extraordinary claims and complaints that reasonably require the storage of personal data.

Rights of the User

Users can exercise certain rights with reference to the personal data processed by the Data Controller.

In particular, the User has the right to:

withdraw consent at any time. The User can revoke the consent to the processing of their personal data previously expressed.
oppose the processing of their personal data. The User can object to the processing when the personal data are processed to pursue a legitimate interest of the Data Controller, for reasons connected with his particular situation, and when they are processed for direct marketing purposes, without giving any reasons.
access their personal data. The User has the right to obtain information on the personal data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the personal data processed.
verify and request the rectification of their personal data. The User can verify the correctness of his / her data and request its updating or correction.
obtain the limitation of the treatment. When certain conditions are met, the User can request the limitation of the processing of their personal data. In this case, the Data Controller will not process the personal data for any other purpose other than their conservation, except with the consent of the User, or to ascertain, exercise and defend a judicial right or to protect rights. of third parties.
obtain the cancellation or removal of their personal data. When certain conditions are met, the User can request the cancellation of their personal data by the Owner.
receive their personal data or have them transferred to another owner. The User has the right to receive his personal data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain the transfer without obstacles to another owner. This right it can be exercised when personal data are processed with automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it.
propose a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority which, for Italy, is the Guarantor for the protection of personal data.

How to exercise your rights

To exercise their rights towards the Owner, Users can send a request to the following email address: info@brandtostore.com.

With respect to the treatments put in place by the Digital Showrooms, the rights must be exercised directly against the latter. For more information, the User can consult the section “Treatments in digital showrooms” below.

Treatments of Digital Showrooms

Whenever the User accesses a section of the Platform dedicated to and managed by the Digital Showrooms, by invitation or on his own initiative, his personal data may be processed by the Digital Showrooms, as independent data controllers. The Owner is not involved in, nor is he responsible for, such treatments and declines any responsibility with respect to them.

Generally, the Digital Showrooms will process the User's data, on the basis of contractual and pre-contractual needs, to allow access to the dedicated section of the Platform, to present their products and services and to follow up on the User's requests. For further information on treatments (including treatments for marketing purposes), the User is invited to contact the relevant Digital Showroom and request the privacy policy.

The Digital Showrooms will be able to communicate the User's personal data to subjects who act on their behalf and are authorized to process them. The User, within the limits of the provisions of the law, has the right to exercise his rights in relation to the owners of the Digital Showrooms pursuant to the privacy legislation.

To obtain complete information on the processing of personal data by Digital Showrooms, to exercise their rights towards them or to obtain a copy of the guarantees adopted in the event of data transfer and more information relating to the categories of recipients or on the times of conservation, the User is invited to contact the Digital Showrooms directly

In the event of a conflict between this section and the information provided by the Digital Showrooms, the User is invited to refer to the latter.